On Wednesday 09 November 2005 08:46, Amy Griffis wrote: > AUDIT_FILTER_USER is not syscall related and should not have been > implemented as such. Stuffing it in the syscall filtering code was > lazy. I'm thinking that you are completely misunderstanding all of this. -Steve